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Abstract. Let E be a division ring and G a finite group of au- 
tomorphisms of E whose elements are distinct modulo inner au- 
tomorphisms of E. Given a representation p: 21 — > GL^E) of 
an F-algebra 21, we give necessary and sufficient conditions for p 
to be writable over F = E , i.e. whether or not there exists a 
matrix A in GLd(E) that conjugates p(2l) into GLd(F). We give 
an algorithm for constructing an A, or proving that no A exists. 
The case of particular interest to us is when E is a field, and p is 
absolutely irreducible. The algorithm relies on an explicit formula 
for A, and a generalization of Hilbert's Theorem 90 (Theorem 3) 
that arises in Galois cohomology. The algorithm has applications 
to the construction of absolutely irreducible group representations 
(especially for solvable groups), and to the recognition of one of 
the classes in Aschbacher's matrix group classification scheme. 

Keywords: Hilbert's Theorem 90, proper sub-division ring 
2000 Mathematics subject classification: 20C40, 20C10 

1. Introduction 

Throughout this paper E denotes a division ring, G a finite group 
of automorphisms of E whose elements are distinct modulo inner auto- 
morphisms of E, and F = E G is the sub-division ring fixed elementwise 
by G. In the second half of this paper, we shall specialize to the case 
when E : F is a finite Galois extension of fields. We view GLd(E) as the 
group of invertible d x d matrices over E. We say that a representation 
p: 21 — > GLrf(E) of an F-algebra 21 can be written over F if there exists 
an A G GLd(E) such that 

A- 1 p(x)A G GL d (¥) (x G 21). 

The purpose of this paper is threefold: (1) to describe the connection 
between Galois cohomology and the problem of writing p over F, (2) to 
describe properties of a map lie used to construct A, and (3) to give 
an algorithm that takes as input an absolutely irreducible p and either 
constructs an A, or proves that no such A exists. 
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Section 2 describes briefly how A gives rise to a certain function 
C: G —>■ GLrf(E) called 1-cocycle. The more interesting problem of how 
C gives rise to A is discussed in Section 3. The heart of this problem 
involves a generalization of Hilbert's Theorem 90: there exists a matrix 
A G GLrf(E) such that C a = Aa{A)~ x for a G G. Equivalently, using 
the language of Galois cohomology, it says that GL d (E)) = {/}. 

This result was proved by Serre [IE] when E is a field, and by Nuss 
[TT] when E is a division ring. Neither the proof by Serre nor Nuss is 
constructive: both proofs require modification in order to suggest an 
algorithm. We shall give a completely elementary proof in Theorem 3 
of these results which suggests both a deterministic and a probabilistic 
algorithm for constructing A. Although some of our results can be 
rephrased in terms of Galois cohomology [TSj, and descent theory for 
noncommutative rings ^T] , we prefer to state our results with minimal 
background in terms of matrices over E and automorphisms. 

Given a 1-cocycle C : G — > GL^(E), we can construct an endomor- 
phism He'- E, dxd — > E dxd of the algebra of d x d matrices over E. In 
Sections 3 and 4 we focus on properties of He- If X is a random element 
of E dxd , then the probability that A = Uc(X) writes p over F is at least 
n^i(l — 2 _l ) > 2/7. After Theorem 8 we shall assume that E is a 
(commutative) field. Different choices for A can give different choices 
for A, and a random X can be a poor choice e.g. the entries of A may 
be 100 digit integers. We show in Theorem 10 that if E is a field and 
|F| > d, then we may take A to be a scalar matrix. This result, which 
is best possible, appears to be helpful in producing "nice" conjugating 
matrices A. Furthermore, whether A G E or A G E dxd , it appears that 
the probabilities Prob(Hc(AJ) invertible) and Prob(Hc(A) invertible) 
are very close. 

Section 5 focuses on the case when p is an absolutely irreducible 
representation. In this case we construct a map D: G — > GL^(E) 
and seek a function p: G — > E x such that pD is a 1-cocycle. The 
existence of p determines whether or not p can be written over F. If 
E is a cyclotomic number field, then the existence of p depends on the 
solutions to certain equations in E. We solve, if possible, certain norm 
equations, and then solve equations in the group of units of the ring of 
algebraic integers of E. 

Section 6 discusses some simple Las Vegas algorithms primarily for 
computing (q — l)th roots, and solving norm equations in finite fields. 
Section 7 gives examples arising from representations of groups. Al- 
though our results apply to arbitrary F-algebras 21, the examples pre- 
sented have 21 = FH where WH is a group algebra of a not necessarily 
finite group H. If a: H —>■ GL^(E) is a group representation, then a 
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may be extended, via a familiar argument, to a representation p of the 
group algebra 21 = FH. Of course, p can be written over F precisely 
when a can. The existence of a normal basis for E over F plays an 
important role in Section 7 and in Theorem 10. 

Our work has been influenced by 0], which considers the case when 
G is cyclic, and by Bruckner's PhD thesis [L. In |T] Bruckner inde- 
pendently discovers some results in [I], and describes an unpublished 
result due to Plesken [TJ Satz 3] which gives a necessary and sufficient 
condition for an absolutely irreducible group representation over a field 
E to be writable over F where E : F is a finite Galois extension of 
fields. An algorithm is given in |TJ Lemma 7] for writing p over F when 
G is cyclic. The proof contains errors, however, all may be corrected. 
It involves choosing a random column vector x G K dxl rather than 
choosing a random matrix X G K dxd . This viewpoint motivated our 
Proposition 5. 

In the sequel we will denote automorphisms of E by a, j3, 7, elements 
of E by A, /1, v, and representations of 21 by p, p', a. 

2. From A to C a 

We shall say that p can be written over F if there exists an A G GL^(E) 
such that 

A~ 1 p(x)A G GL d (¥) (x G 21). 

Our goal is to construct a conjugating matrix A, or prove that one does 
not exist. 

An automorphism a G Aut(E) induces an automorphism, also de- 
noted a, of the algebra K dxd of d x d matrices over E: (fMj) ^ (a(pij)). 
Now A writes p over F if and only if 

a(A~ 1 p(x)A) = A~ 1 p(x)A (x G 21, a G G). 

In subsequent equations, which hold for all x G 21, we shall omit the 
x's and simply write 

aiA^pA) = A- x pA (a G G). (1) 

Therefore C a := Ao(y4) _1 satisfies 

C- l pC a = ao P (a EG). (2) 

Furthermore, AafS(A)- 1 = Aa(A)~ 1 a(Af3(A)~ 1 ) and so 

C a/3 = C a a(Cp) (a,(3eG). (3) 

We chose our automorphisms to act on the left, to avoid the "twisted" 
equation C a/ g = C / 3(C a ) /3 , which follows from C a = A^A 01 )^ 1 . 
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A map C : G —* GL d (E) defined by a h C a satisfying Eq. (3) 
is called a 1-cocycle, and if there exists an A G GL^(E) such that 
C a = Aa(y4) _1 for all a G G, then C is called a 1-coboundary. In 
summary, a necessary condition for p to be writable over F is that there 
exist a 1-cocycle C satisfying Eq. (2). More significantly, a 1-cocycle 
C is a 1-coboundary, by a generalization of Hilbert's Theorem 90, and 
there exist constructive methods for finding A from C, and hence for 
writing p over F. 

3. From C a to A 

The following result generalizes a well-known result of Artin [TTH 
VIII §4, Theorem 7] which says that distinct characters H — > E x of a 
group if with values in a field E, are linearly independent over E. 

Lemma 1. Let E be a division ring. 

(a) Let Xii---iXn be group homomorphisms H — > E x which are 
distinct modulo inner automorphisms of E. T/ien Xi> • • • j Xn 
are linearly independent over E. 

(b) If G is a finite subgroup o/Aut(E) whose elements are distinct 
modulo Inn(E), then the trace map Tr : E — ► F : A i— > J2 a eG a W 
is surjective. 

Proof, (a) We shall view E as a left vector space over F. The proof can 
be modified for right F-spaces. Suppose that \\Xi + • • • + A„Xn = 
where not all Aj are zero, and n is positive and minimal. Then n > 2 
and each Aj is nonzero. If h, k G iJ, then 

AlXlW H H AnXn(^) = 0, 

XxXi(hk) + • • • + Kxnihk) =0. 

Premultiplying the first equation by AiXi(^)A ] ^ 1 and subtracting the 
second equation gives J^" =2 (AiXi(/i)A^ 1 Aj — XiXi(h)) Xi{k) = for all 
fa, G if. The minimality of n implies that each coefficient is zero. 
Therefore Xi{h) = X^ 1 XiXi(h) X^ 1 X { for all h G H, and x% is equivalent 
modulo Inn(E) to Xi f° r ^ > 2, a contradiction. 

(b) Let Xii ■ ■ ■ ? Xn denote the elements of G and let H = E x . By 
part (a), Xi, • • • , Xn are E-linearly independent and hence J2 a ec a ^ ®- 
Therefore the F-linear map Tr : E — > F is surjective. □ 

Assume we know matrices C a G GL^(E) satisfying Eq. (3). Theo- 
rem 3 shows how to construct A G GLrf(E) such that C a = Aa(A)^ 1 
for a G G. It relies on the following simple lemma. 

Lemma 2. Let E be a division ring, and let G be a finite subgroup of 
Aut(E). 
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(a) // C a G E dxd satisfies C a/3 = C a + a(C /3 ) for all a, (3 G G, then 
^c(X) = E a eG C « + a ( X ) saUs fi es C * + «(ncP0) = Uc(X) 
for all X G E dxd and aeG. 

(b) IfC a G GL d (E) satisfies Eq. (3), then U C (X) = J2 a eG C M X ) 
satisfies C a a(U c (X)) = U C (X) for all X G E dxd and a G G. 

(c) If C a G GL d {E) satisfies Eq. (3) and no two elements of G 
are equal modulo Inn(E), then then there exists a A G E such 
that the first column, x, of Uc(IX) is nonzero, and satisfies 
C a a(x) = x for all a G G. 

Proof. We omit the proof of part (a) as it follows from the proof of part 
(b) with products replaced by sums. It follows from Eq. (3) that 

0(n c (x)) = c a a (j2 c eP( x n =^ t C a paP(X) = U C (X). 

V/36G / aeG 

Consider part (c). Let e be the column vector with 1 in the first row, 
and zeroes elsewhere. Then x = U.o(IX)e, and by part (b) 

C a a(x) = C a a(n c (JA)e) = C a a(Tl c (I\))e = U c (IX)e = x. 

Moreover, each of the column vectors of C a a(X) are nonzero. By 
Lemma 1(b) the elements of G are E-linearly independent. Hence there 
exists a A G E such that x = J2aeG C a a(\)e ^ 0. □ 

The sum ^2,C a a{X) was considered in I have learned recently 
that this sum dates back to Poincare [TBI P- 159]. I attribute the 
following theorem to Serre ^01 Prop. 3] when E is a field, and to Nuss 
[TT1 Theorem B] when E is a division ring. We offer an elementary proof 
conducive to practical implementation. A discussion of non-matrix 
versions of Hilbert's Theorem 90 over division rings can be found in 

M- 

Theorem 3. LetE be a division ring andG a finite subgroup o/Aut(E) 
whose elements are distinct modulo Inn(E). 

(a) Let C a G E dxd , aeG. There exists an A G E dxd satisfying 
C a — A — a(A), a G G, if and only if C a p = C a + ot(Cp) for all 
a, (3 G G. 

(b) Let C a G GL d (E), aeG. There exists an A G GL d (E) 
satisfying C a = Aa(A)~ l , aeG, if and only ifC a p = C a a(Cp) 
for all a, /3 e G. 

Proof. The forward implication is straightforward for parts (a) and (b). 
The reverse implication follows from Lemma 2 for part (a), and for 
part (b) provided there exists and X G E dxd such that Hq(X) is 
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invertible. While it is clear that the image of IT,^ contains nonzero 
matrices, it is more subtle that im(ILj) contains invertible matrices. 
We prove this second fact via induction on d. 

The result is true when d — 1 by Lemma 2(c) since if x ^ 0, then the 
lxl matrix [x] is invertible. Suppose that d > 1 and that the result 
is true for dimension d — 1. By Lemma 2(c) there exists an invertible 
matrix Y with first column x, satisfying C a a(x) = x for all aeG. 
Therefore, 

Y- 1 C a a{Y) = Q %£j (aeG) 

where C' a e GLd_i(E). Since Y~ l C a a(Y) satisfies Eq. (3), so too 
does C' a . By induction, there exists an A' e GLd_i(E) satisfying 
C' a a{A') = A' for all aeG. Thus 

1 1) ly_ic « a ( y ) a (J 1) = (I i) =■ °" ( a e ^- 

Since C'^ satisfies Eq. (3), the z a satisfy z a p = z a + cx(zp) for all 
a,/3 e G. By part (a) there exists a 1 x {d — 1) vector w such that 

z a = w — a(w) for all aeG. Therefore, A = Y j ) • D 

Lemma 2(b) entreats us to study the maps Tl c ,T a : E, dxd — > K dxd 
defined by 

U C (X) = C a a(X) and T a (X) = C a a(X) - X. 

aeG 

When char(E) \ \G\, it is convenient to also define ire by tt c = |C| _1 rio- 
The matrix A in Theorem 3 satisfying C a = Aa(A)^ 1 is far from 
unique. Indeed the matrix AY, where Y e GL^(F), has the same 
property. It is useful to regard E, dxd as a right ¥ dxd - module, where the 
scalar action is right matrix multiplication. 

Proposition 4. Let C : G — > GL^(E) be a 1-cocycle where E is a 
division ring and G is a finite subgroup of Aut(E). 

(a) The maps lie and T a are right ¥ dxd -homomorphisms satisfying 



n c or a = r a on c = o and w c = \g\u 



€■ 



(b) //char(E) \ \G\, then ix 2 c = ix c and so E dxd = im(7r c ) +ker(vr c ) 
where ker(irc) = im(l — 7177). Moreover, ifirc(X) = XY where 
Y e GL d (¥), then tt c {X) = X. 

(c) IfC a = Aa(A)' 1 for all aeG, then U C (X) = ATr^^X) 
whereTi: ¥ dxd ^ ¥ dxd is the trace function: X 1— > ^2 aeG &{X) . 
Moreover, U C (AX) = ATi(X), U C (A) = \G\A and n c (A) = A. 
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(d) Let Y G GL d (E) be fixed, and let D : G -> GL d (E) be defined by 
D a = Y^CaaiY) . Then D a satisfies Eq. (3), and 

Tl D (X)=Y- 1 Tlc(YX). 

Proof, (a) It is clear that II c (Xi + X 2 ) = n c (Xi) + U C {X 2 ) and 
U C {XY) = U C (X)Y for all F G F dxd . Thus U c , and similarly 
r a , are right F dxd -module homomorphisms. Lemma 2(b) shows that 
T a o n<7 = 0, and the following argument shows that Uc ° = 0: 

U c (C fi P(X)) = Y,C a a(C p (3{X)) = ^TCV^(X) = U C (X). 

aeG aeG 

In addition, by the above equation: 

u c (x) = ^TiucvW) = J2 u c(x) = \g\u c (x). 

peG peG 

(b) Multiplying the equation U c = \G\Uc by | C | 2 gives 7i c = ttq. 
Standard arguments show that K dxd = im(7Tc) + ker(TT C .). If 7ic{X) 
equals XY, then by part (a) 

XY = ix c (X) = 7T 2 C (X) = ir c (XY) = n c (X)Y = XY 2 . 

Postmultiplying by F" 1 gives X = XY. Thus nc(X) = X. 
Consider part (c): 

U C (X) =^Aa(A)- 1 a(X) = A^a(A~ x X) = ATr(A~ 1 X). 

aeG aeG 

Setting X = A\ shows U C (AX) = ATr(IX) = ATr(X), and setting 
A = 1 shows He (A) = \G\A and nc(A) = A. Part (d) is straightfor- 
ward. (The 1-cocycles C and D are called cohomologous.) □ 

The endomorphisms He, T a of E dxd give rise to endomorphisms lie, 
r a of the space K dxl of d x 1 column vectors: 

fic(z) = ^2 C a a(x), f a (x) = C a a(x) - x (a G G). 

aeG 

When char(E) \ \G\, it is convenient to also define 7?e by t^c — \G\~ l Hc- 
If x G E dxl is the first column of X G E dxd , and F = diag(l, 0, . . . , 0), 
then the first columns of U C (XY) = U C (X)Y and V a (XY) = T a (X)Y 
are lie (a;) an d r a (x) respectively. 

It is worth recording some simple generalizations of Prop. 4(a,b,c) 
such as: f a o% = U c of a = 0, U 2 C = \G\U C , E dxl = im(7r c ) + ker(vre) 
and Hc(x) = ATr(A~ 1 x) where Tr denotes the trace map E a!xl — > F rfxl . 
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Proposition 5. Let C : G — > GL d (E) fre a 1-cocycle where E is a 
division ring and G is a finite subgroup of Aut(E) whose elements 
are distinct modulo Inn(E). Let S be a generating set for G, and let 
F = E G . 

(a) 1111(11(7) — Claes ker(rc) is the F-linear span of the columns of 
any matrix A satisfying C a = Aa(A)^ 1 for all a G G. 

(b) //char(E) f |G|, then ker(n c ) = EaesM^a)- 

(c) If a ^ 1, then im(r a ) spans E dxl as an E-space. 

(d) IfO^xe ker(n c ) ; then xE £ ker(n c ). 

Proof, (a) r„oIIc = 0, implies im(Ilc*) C f] aeS ker(T Q ). Conversely, if 

x G HaeS ker(r„), then C a at(x) = x for a G S. It follows from Eq. (3) 
that C a a(x) = x for a G G. Thus 

U c {x\) = ^C a a{x)a{\) = ^xa{X) = xTr(X). 

aeG aeG 

By Lemma 1(b), there exists a A G E such that Tr(A) = 1. Thus 
x G im(ilc) and so im(IIc) = f] aeS ker(T a ). It follows from Prop. 4(c) 
that im(ilc) = A¥ dxd , and so im(llc) is the F-linear span of columns 
of A. 

(b) lie o r o = 0, implies ker(Ilc) 2 ^aes^i^a)- It follows from 
Eq. (3) that 

C aP af3{x) -x= [C a a(C^(x)) - C p f3{x)} + [C p /3(x) - x}. 

Hence im(T a(3 ) C im(r„) + im(I» and ^ aGG im ( r «) = E ae s im ( r «)- 
Conversely, if x G ker(Il c .), then J2 aeG C a a(x) = and hence 

x = TrdGr 1 *) = ^f^G^x) G £im(f a ) = £im(f a ). 

aeG aeG aeS 

Thus ker(II c <) = ^ 5 im(r a ) as desired. 

(c) Suppose that Let 0: E dxl — > E be an E-linear map containing 
im(r a ) in its kernel. Then for all x G E dxl and A G E: 

= <f>(f a (x\)) = <j)(C a a(x))a(X) - <f>(x)X. 

Since a ^ 1 it follows from Lemma 1(a) that = for all x and 
hence = 0. This proves that the E-linear span of im(r a ) equals E rfxl , 
and hence dim F (im(r a )) > d. 

(d) Suppose that ^ x G ker(n c ). If T\. c {xX) = for all A G E, 
then J2aeG G a a(x)a(X) = 0. Since C a a(x) ^ 0, this contradicts 
Lemma 1(a). Thus xE % ker(ilc) as claimed. □ 
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In light of Prop. 5(a) the assumption in Prop. 5(b) that char(E) \ \G\ 
may be unnecessary. 

Proposition 6. Let (\ a ) a &G be an W-basis for E, and let E it j G K dxd 
be the matrix with 1 in the (i,j)th entry and zeroes elsewhere. Then 
K dxd is a freely generated as a right ¥ dxd -module by E it i\ a , a G G, 
i = 1, . . . , d. 

Proof. By taking F-linear combinations of Ei^\ a gives a matrix with 
arbitrary first column. Taking F dxd -multiples gives every element of 
E, dxd . The fact that the E i:1 X a freely generate E dxd follows from the 
observation that E ij i¥ dxd comprises matrices with all rows zero except 
the ith, and the ith row can be an arbitrary vector in ¥ lxd . □ 

It follows from Theorem 3 and the above proposition that an invert- 
ible matrix can be found by taking F dxd -linear combinations of the 
matrices Ii^Aa-E^i). Since each Ylc(X a E^i) is singular (unless d — 1), 
it is better to consider F dxd -linear combinations of Uc{X a D l ) where 
D is the permutation matrix corresponding to the <i-cycle (1,2, ... ,d). 
A simple argument shows that the \ a D % generate E dxd as a W dxd - 
module, although not freely. In practice F dxd -linear combinations are 
not necessary as Hc(\ a D l ) is commonly invertible. Thus we typically 
do not evaluate Hc(X) at a random matrix X. Doing so can result in 
"bad" matrices A = Uc(X), e.g. with 100 digit integer entries. More 
significantly, the matrices A~ l p(x)A can be "bad". Choosing X to 
be a scalar matrix seems to result in "good" matrices Uc(X). This 
imprecise statement has some theoretical underpinning in Theorem 10. 

4. Invertible elements in im(n c ) 

The primary aim of this section is to prove in Theorem 10 that if 
|F| > d there exists a A G E such that He (/A) is invertible. We show in 
Theorem 8 that the assumption |F| > d is best possible by considering 
a special case when A, and hence each C a , is upper-triangular. 

We need a preliminary lemma. 

Lemma 7. Let V be a vector space over a division ring F. If V 
is a union of m proper subspaces, then dim^iV) > 2 and |F| < m. 
Conversely, if dim^(V) > 2 and F is finite, then V is a union of |F| + 1 
proper subspaces. 

Proof. The proof in [HI Problem 24] generalizes to division rings. If 
dimp(y) > 2, then V = U {J X&¥ H\ where Hqq is the hyperplane 
X\ — and H\ the hyperplane \x\ + x<i = 0. Thus V is a union of 
|F| + 1 proper subspaces. □ 
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Theorem 8. Let C : G — ► GL^(E) be a 1-cocycle where G and E are as 
in Theorem 3. Suppose that C a = Aa(A)~ x , a G G, where A G GL rf (E) 
is upper-triangular and F = E G . If |F| > i/ien t/iere exists a A G E 
suc/i i/icrf nc(/A) invertible. Moreover, if |F| < d ; i/ien i/iere exists 
an upper-triangular matrix A G GL^(E) swc/i i/icrf IIc(/A) zs singular 
for all A G E. 

Proof. It follows from Prop. 4(c) that lie (/A) is invertible if and only 
if Tr(A _1 A) is invertible. If a^i denotes the (i,z)th entry of A, then 
Tr(A _1 A) is upper-triangular with (i,z)th entry Ti(a~j\). Let K(a^[) 
denote the kernel of the map A >— > Tr(a^lX). By Lemma 1(b) the F- 
subspace K(a~l) of E has codimension 1. If |F| > d, then E is not a 
union of d proper subspaces by Lemma 7. Thus there exists a A G E not 
in Uf =1 K( a 7i)- Since Tr(a^/A) ^ for each i, it follows that Hc<(/A) 
is invertible. 

Conversely, suppose that |F| < d. Then E is a union of |F| + 1 
proper subspaces, so we may choose a^\,...,a d 1 d G E x such that 

E = [jf =1 K(a~l). Then for each A G E at least one diagonal entry of 
the upper-triangular matrix Tr(A _1 A) is zero. Put differently, He (IX) 
is singular for all A G E. □ 

Assumption: We shall henceforth assume that E is a field. 

Theorem 10 generalizes Theorem 8 to deal with arbitrary d x d 
matrices A. Its proof assumes that E is a field, and depends on the 
following well-known result. 

Lemma 9. Let f be an element of the polynomial ring F[xi, . . . , x n ] 
such that f(ai, . . . , a n ) = for all (a 1; . . . , a n ) G F n . 

(a) If the degree of f in each variable is less than \¥\, then f = 0. 

(b) If the degree of f is at most q where |F| = q, then there exists 
ui, . . . , v n G F such that f(xi, . . . , x n ) = Yn=i V A X \ ~ x i)- 

Proof, (a) See (TU1 Chapter V, Theorem 5] (and [TU1 Corollary 3]) for 
the case when F is finite (and F is infinite). Consider part (b). Recall 
that the degree of a nonzero polynomial is the maximum degree of a 
monomial summand, and deg(xj 1 ■ • • x^ n ) — k\ + ■ ■ ■ + k n . The result 
is true when n = 1. Suppose that n > 1 and / = X^=o fi x n~ z 
where /, is a polynomial in x%, . . . , x n -\ of degree at most i. Fix 
(ai, . . . , a n _i) G F n_1 and consider f(a%, . . . , a n -i, x n ). By the n — 1 
case, fi(a t , a n ^ x ) = for % = 1, . . . , q - 2 and f = -f q -i = v n is 
a constant polynomial. By part (a), fa — for i — 1, . . . , q — 2 and by 
induction there exist u±, . . . , v n -i G F such that f q = Yl^i u i( x i ~~ x i)- 
In summary, / = Y^ =1 v i( x \ ~ x i)- □ 
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The reader may like to compare Lemma 9(b) with a theorem due to 
Chevalley ^SJ §1.7, Theorem 2]. 

Theorem 10. Let E be a field, and E : F a finite Galois extension with 
group G. Suppose that C : G — > GLd(E) is a 1-cocycle and |F| > d. 
Then there exists a A G E such that Uc(IX) = ^2 a€ c^ aa (^) ^ s ^ nver ^- 
ible. 

Proof. By Theorem 3 there exists an invertible matrix A satisfying 
C a = Aa(A)-\ a e G. By Prop. 4(c), U C (XI) = ATi(XA^ 1 ). Thus 
He (XI) is invertible precisely when Tr(AA _1 ) is invertible. Our problem 
can be rephrased: Given X G GL<z(E), find A G E such that Tr(AX) is 
invertible. 

By [14, Theorems 7.4.2, 8.7.2] there exists ( G E such that (a(()) aeG 
is a basis for E over F (such a basis is called a normal basis). Now 
Tr(£) G F x by Lemma 1(b). By replacing ( by Tr(C) -1 £ we may 
additionally assume that Tr(£) = 1. A typical element of E has the 
form J2 a€G x a a(() where x a G F. Write 

Xij = ^ X a a (0 and A = V?(0 
aeG /3GG 

where Xij denotes the (i,j)th entry of X. We shall view the x l J as 
elements of F, and the Xp as algebraically independent commuting 
variables that are fixed by G. 

Let (ji a ,p) be the matrix of the F-linear transformation E — > E 
defined by A i— > (X. That is, 

Ca(C) = X)/W?(C) (^eF). (4) 

P&G 

Then 

xX = (5>«a(C)J (^A^(O) =^x Q A^a(C«- 1 /5(0) 

= ^2 XaXpfJ, a -lp n 07(C)- 

Replacing 07 by 7 gives a;A = ^XqA^/Xq-i^q-i^, 7(C)- Our normaliza- 
tion implies that Tr(7(£)) = 1, and hence 



Tr(xA) = ^2 I ^ Ma-^.q- 1 ?^ ) x «- 



(5) 
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Abbreviate the above inner sum by z a . Then 

Za = [ Y^-^^-h I *p = ^Tr(Ca~ 1 /5(C))A /3 

P V 7 / P 

= ^Tr(a(C)/5(C))A /3 . (6) 
Replacing x a in Eq. (5) by x 1 ^ shows 

detTr(XA) = det(x i>i A) = det ^^z a a#J • 

This determinant is a polynomial in the variables z a which is either the 
zero polynomial, or is homogeneous of degree d in the z a . Specifically, 

det (^ZaX^ = ^p {ai ,..., ad} z ai •••Zat (7) 

where the sum is taken over all orbits of the symmetric group Sd on 
the group G d . Such orbits are in bijective correspondence with the 
multisets {ai, . . . , aid} of G having at least one, and at most d, distinct 
elements. We view the coefficient P{ ai ,...,a d } of element 
of F, not a polynomial over F in the x l J . 

The matrix (Tr(a(C)/3(C)))a,^eG is invertible (see [El §7.2]), and its 
determinant equals the discriminant FL^WC) — P{0) °f the minimal 
polynomial n a (^ — a (0) °f C over ^- By Eq. (6) as (Xp) runs through 
the vectors in the vector space F' G ', (z a ) does the same. 

The determinant det(X) = det(Y^ a x a' a (0) can be evaluated using 
the same reasoning used for Eq. (7). Replacing z a by a(() in Eq. (7) 
shows 

det(X) = 

Let us assume that X is fixed and that det Tr(XA) = for all A G E 
(or equivalently, all (A^) G F' G I). By virtue of the previous paragraph, 
this says that the polynomial Eq. (7) is zero for all (z a ) G Fl G L If 
|F| > d, then Lemma 9(a) implies that each P{ ai ,...,a d } equals zero. By 
Eq. (8), det(X) = 0. In summary, we have proved that if |F| > d and 
det(X) 7^ 0, then there exists a A G E such that detTr(AX) ^ 0. 

Finally, suppose that |F| — d is finite and detTr(XA) = for all 

A G E. By Lemma 9(b), detTr(XA) = J2 a eG h ' a ( Za ~ z °)- Since this 
polynomial is not homogeneous, each v a is zero. Thus each P{ ai ,...,a d } 
equals zero, and det(X) = by Eq. (8). This completes the proof. □ 
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In the light of Theorem 8, one may suspect that Theorem 10 holds 
more generally: namely when E is a division ring. 

5. Algorithmic considerations 

Henceforth assume that p : 21 — ^ GL^(E) is an absolutely irreducible 
representation, and (S | R) is a finite presentation of G. 

If p can be written over F, then there exist matrices D a G GL^(E) 
satisfying 

D- 1 pD a = aop {aeG). (9) 

There are a variety of methods for calculating the D a , or proving that 
some do not exist. These include (a) using the Meataxe algorithm 
[El OH] (b) solving d 2 \G\ homogeneous linear equations over F in d 2 \G\ 
unknowns, and (c) averaging over a chain 21 = 2li D - • • D 2l n+ i = {0} 
of F- algebras where the indices |2lj : 2lj+i| are "small". 

If p can be written over F, then by absolute irreducibility there exists 
a function p: G —>■ E x such that C = pD is a 1-cocycle. It suffices to 
know C a for a G S, because Eq. (3) allows us to compute C 7 for 7 G G. 
Suppose henceforth that we have computed matrices D a , a G S, that 
satisfy Eq. (9). Now the C a , a G S, satisfy the relations R for G, and 
in general the D a will not. The relations give rise to a system of \R\ 
equations that the scalars p a must satisfy. If these equations can not 
be solved in E x , then p can not be written over F, otherwise it can by 
Section 2. We shall say more about the equations that the p a satisfy. 

Two important applications of this work are (a) when E is a subfield 
of a cyclotomic field, and (b) when E is a finite field. In these cases G 
is abelian, or cyclic and we assume that G has a presentation: 

G = (oil, ■ ■ ■ ,0! s I a™* — 1, 1 < i < s, [aij, oii] — 1, 1 < i < j < s) 

where [a,/3] denotes the commutator a~ x fi~ x a(i. We shall not neces- 
sarily assume that mi\m2\ ■ ■ ■ \m s . 

The power relations and the commutator relations give different 
equations that the p a must satisfy. Consider first relations of the form 
a m = 1. It follows from Eq. (3) that C a m = C a a(C a ) ■ ■ ■ a m - x (C a ) and 
hence that 

D a a(D a ) ■ ■ ■ a m - l (D a ) = \J where 
p a a(p a ) ■ ■ ■ a™' 1 (p a ) = {a e S) . (10) 

Given a subgroup A of G, define the norm map AOi: E x — ► (E A ) X 
by N A (X) = UaeA a W- Then E q- ( 10 ) sa y s: N {a) (D a ) = XJ where 
N( a )(p a ) = A" 1 for some p a G E x . A necessary condition is that 
«(A a ) = A a . When E is finite, N/ a \ is surjective, and this necessary 
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condition is sufficient to guarantee a solution for fj, a . By contrast, when 
E is infinite the equation N^ a )(fj, a ) = A" 1 may have no solution (c.f. 
Section 7, Example 1). There are a variety of algorithms for solving 
for fi a when E is finite, see for example Section 6. Different algorithms 
are required in the the case when E is a number field, see for example 
j2] and [T7j. Assume henceforth that the equations N/ a \(p a ) = A" 1 can 
be solved. By replacing D a by ii^D a we will henceforth assume that 
A Q = 1 for a G S. We shall now seek a function v such that uD is a 
1-cocycle. 

Consider now equations arising from commutators [ce,/3] = 1 where 
ce,/3 G S. Applying Eq. (3) twice gives 



Substituting C a = v a D a into a{Cp) 1 C a l Cp(3{C a ) = I gives 



Let Ka and I a denote the kernel and image of the norm map iV^. 
As we are assuming that A a = A^ = 1 it follows that v a 6 Ka and 
Up G Kb where A = (a) and B = (j3). It follows from Eq. (11) that 
NA(\ a ^) = N B (\ ai p) = 1, and hence a necessary condition is that 
\ a ,p G Ka H Kb- 



C a a(Cp) — C a p — C/3 a — Cp(3(C a ) 



(a,/3eG). 



a {Dp) D~ x Dp(3{D a ) = \ a>p I where 

l3{uaY l u p l v a a{v p ) = A Qi/3 (a, (3 G S). 



(11) 



f E 




• e = 



,rnn 



- 1 



K A 




K a K b = K AB 

\k b 

KaDKb 



ejict - 1) 




e/(q-l) 
\ e/(q 
e/£ 



1) 




Figure 1. Subgroups of W* mn and their orders. 
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Since AB — BA and AnB — 1, N AB equals N A oN B = N B oN A , and 
hence K A K B C if^s and i^s C/^n/g. If E is finite, then these con- 
tainments are equalities, and the necessary condition G K A H i^s 
is sufficient to solve Eq. (11) for G Ka and up G if^ (see Section 6). 

When F = E AB is finite of order q, then E = F, m », and G = AB. 
In Figure 1, i = gcd(g m - l,q n - 1) = (g m - l)(g n - l)/(g - 1) and 
/ab=E x . 

Suppose that E is a number field and p maps into GL rf (Z E ), where 
Zg denotes the ring of integers of E. Then there exist algorithms [3] 
for computing the group Z7(Ze) of units of Zg. Therefore solving 



for z/ Q G -^(q), G K(p) reduces to solving a linear system over Z. 

Although evaluating Uc(X) is clearly useful, it is time-consuming 
when \G\ is large unless an averaging argument is used. We describe 
how to use a subgroup chain G = G > G\ > ■ ■ ■ > G t +i = 1 to reduce 
the cost of computing U C {X) from 0(jC|) to 0(£* =1 : G l \). If 

G = a%H U • • • U a r H is a decomposition of G into left cosets of H, 
then 



Put differently, I1c|g = Y^i=i C ai otJlc\H- If G is solvable, then we may 
choose Gi so that Gi > and Gj = (tj, Gj+i). In this case, an idea 
in jH p. 1705] further reduces the complexity of evaluating H C (X) to 



A Las Vegas algorithm is one that involves random choices, and when 
it terminates it produces an answer that is provably correct. For ex- 
ample, a 1-cocycle C: G — > GL^(E) may be written as C a = Aa(A)^ 1 , 
a G G, by repeated selecting a random X G K dxd until A = Hq(X) 
is invertible. If |F| = q is finite and a uniform distribution is used for 
E dxrf , then the probability that Uc{X) is invertible is 



(3{v a ) u p v a a{vp) = X a>l 3 (a,(3eS) 



n c (A) 




0(log|G|). 



6. Las Vegas algorithms 



GL d (F)| 



d 



f(d,q) 



Note that 



limsup f(d, q) — f(d, oo) = 1 and liminf f(d, q) — /(oo, 2). 
o <L>q 
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The following bounds for f(d, q) are useful: 

oo oo 

1 - q- 1 > f(d, q) > H(l - q-*) > 1 - ^ <T = 1 - (q - l)" 1 . 

i=i i=i 

If q = 2, then /(oo, 2) = 0.288788 • • • > 2/7 gives a better lower bound. 
Thus one would expect to make on average at most 3.5 choices for X. 
The probability that the algorithm fails to terminate after n selections 
is (l-f(d,q)) n < min{(g-l)-", (5/7)"}. If E is infinite, then it follows 
by localization and a local-global argument that the probability that 
Hc{X) is invertible is 1. 

In the light of Theorem 10 we should also consider the probability, 
Pc, that a random A G E x has He (XI) invertible. If E is finite, then 
certain choices for C have pc — 1. Empirical evidence suggests that 
when | IE | is small the average value of pc, averaged over all 1-cocycles 
C, is a number very close to f(d, q). This is our default expectation. 

We describe a Las Vegas algorithm for computing (q — l)th roots. 
Let C: G -> GLi(E) be a 1-cocycle where E = ¥ q n, F = ¥ q and 
G = (a) where a(X) = X q . If C a = A, then Aa(A) • • -ai n-1 (A) = 1 
and finding /iGE x such that A = fia(fi)" 1 is equivalent to finding a 
(q — l)th root, as /i 9-1 = A -1 . Lemma 2(b) gives a Las Vegas algorithm 
for computing /i: choose v G E randomly until Hc(v) is nonzero. As 
He is a nonzero F-linear map E — * F, each v has probability 1 — q~ x 
of success. Unless q is small, this Las Vegas algorithm is faster than 
factoring the polynomial x q ^ 1 — A -1 over E. 

We comment now on Las Vegas algorithms for solving norm equa- 
tions in finite fields. Let E = ¥ q n, F = ¥ q and let A G F x . Denote by 
e, / and |A| the orders of E x , F x and (A) respectively. One may solve 
the equation N(fj) = A by randomly selecting v G E x and checking 
whether or not /i = i>f/\ x \ satisfies N(fi) = A. As the norm map 
A^: E x — > F x : /i i— > fi e /- f is surjective, each selection has probability 
|A| _1 of success. This algorithm is useful when |A| is small. If |A| 
is large, then another Las Vegas algorithm is more desirable. Let 
d = gcd(|A|, e/f). Since q = 1 mod |A|, it follows that e/ f = n 
mod |A|. In most applications, n is small when / is large, and hence 
when | A | is large d is usually much smaller. Denote by s a multiplicative 
inverse of e/(fd) modulo \X\/d. Randomly select v G E x . A root fi of 
the polynomial x d — \ s u^ has probability d~ l of satisfying N(p) = A. 

We prove that the above algorithm is correct, and that either all 
dth roots /j, of X s 'v? satisfy N(p) = A, or none do. Let E x = ((), 
and suppose that A = and v — C? . As has order /, |A| equals 
// gcd(i, /). Let r, s G Z satisfy r\\\+se/ f = d where d = gcd(|A|, e/f). 
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If pi = ( k , then modulo e 
dk = ise/f + jf 
= i(d-r\X\)+jf 

= id+ (—t + j)f where t := irj gcd(«, /) G Z. 
There exists an i G Z such that 

k = i + (j-t)f/d + £e/d 
ke/f = te/f + (j - t)e/d + £(e/d)(e/f) 
= iej f + (j — t)e/d mode. 

So N(fi) = N(( k ) = C ke/f = C^f^/y- 1 = Xuji- 1 where oj = C /d has 
order d. In summary, N(fj) = A if and only if j = t mod d. Thus the 
probability of success is rf" 1 . As the value of iV(/x) is independent of £, 
either each of the d roots \x satisfy N(/j) = A, or none do. 

In the case when E is finite and \G\ = |E : F| is not a prime 
power, then a divide-and-conquer strategy may be used for solving 
norm equations. Suppose that |E : F| = mn where gcd(m, n) = 1 
and F = ¥ q . Let G = AB where A = (a) satisfies a(X) = A 9 ", and 
B = (P) satisfies /5(A) = A 9 ™. Then \A\ = m and \B\ = n. If the 
presentation G = (a(3 \ (af3) mn = 1) is used, then one need only solve 
one norm equation: jj, aj3 = X a/3 where X a/ 3 G F x is given. If 

the presentation G = (a, (3 \ a m = f3 n = [(3, a] = 1) is used, then one 
must solve three equations: /A = A Q , = 

and vl'^vf' 1 = A Q( g where A a G E A , X p G E B and A Qi/3 G K A n K B . 
The two norm equations could be solved using the above Las Vegas 
algorithm. This has the advantage that gcd(|A a |,m) and gcddA^], n) 
are likely smaller than gcd(|A aj g|, mn). There exist r, s G Z such that 

r(q m -1) + s(q n - 1) = q - 1. 

Since A Qj/ g G fl K B C our Las Vegas algorithm for computing 

(g — l)th roots may be used to solve the equations z/ 9 " 1 = A"^ and 

"V = A «,/3- Then 

, y l-9 m ly 9 n -l _ X r(g m -l)/(g-l)+s(g' l -l)/( g -l) _ , 

7. Remarks and examples 

The assumption that p is absolutely irreducible was not used in 
Sections 1-4, however, it is very useful for practical algorithms for 
writing p over F. If p is reducible, then one may need to solve linear 
systems to find D satisfying Eq. (9), and the solution spaces may 
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be more than one-dimensional. Finding C from D is likely to be 
problematic. If p is irreducible but not absolutely irreducible, then 
the Meataxe [HJ EI] may be used to find D. In this case, however, 
the arithmetic needed to solve for /i (and hence find C) takes place in 
the division algebra End(p) of matrices commuting with p(2l). See [Sj 
for a description of some of the relevant noncommutative theory. We 
shall assume henceforth that 21 = FH is a group algebra. 

The connection between Eif-modules and Fif-modules is clarified 
by considering normal bases. The following simple observation is not 
made explicitly in texts covering modular representation theory such 
as [7]. Let {ce(\)) a( zG be a normal basis for E over F. Let V = E dxl 
and U = ¥ dxl . Then V viewed as an Fif-module is a direct sum of 
\G\ Galois conjugate FiJ-submodules: V = + ae a a {X)U ■ Note that 
A-^p{h)A e GL d (F) for h G H and so 

a{\)UA- x p{h)A = a(X)U = a(XU). 

Thus the a(X)U are A~ l pA invariant, and Galois conjugate. 

In the examples below E = F(£ n ) is a subfield of the complex num- 
bers, and C n = e 2/K% l n . An automorphism a of E is determined by 
a number k satisfying a(( n ) = Cn an d gcd(fc, n) = 1. As usual, Q 
denotes the rational field. 

Example 1. Let H be the di cyclic group of order 8n 

H=(a,b\a 2 = b 2n , b 4n = 1, a~ l ba = b' 1 }. 

Let E = Q(C) where C = (in- Define a e Aut(E) by a(() = C 1 . Then 
a has order 2, and F = E< a > = Q(( + C" 1 )- Define p: H -> GL 2 (E) by 

p(a) = ^ and p(b) = 

Then D a = p(a) and Di = p(l) satisfies Eq. (9). Since N{ a )(D a ) equals 
D a a(D a ) = D\ = —I, it follows that A a = —1. Since a is complex 
conjugation, N( a )(p a ) = p a JI^ = ||yU Q || 2 > 0, so N{ a )(p Ja ) = —1 has no 
solution. Consequently, p can not be written over F. 

Example 2. Let H = (a, b | a 2 = b 4n ,b 8n = l,a~ l ba = b 1+4n ) and let 
E = Q(C) where C = Csn- Define a e Aut(E) by a(() = C 1+4n = ~C- 
Then a has order 2, and F = = Q(C 2 ). Define p: H -> GL 2 (E) by 

P( a ) = J) and P( b ) = 

Set Di = p(l) and D a = p(a). Then N( a )(D a ) = —I, so X a = — 1. 
Now p a = ( 2n satisfies N( a }(p a ) = p 2 a = — 1 = A" 1 . Thus G\ = p(l) 




C o 

Q ^l+4n 
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and C a = ( 2n p(a). The matrix 



A := IT 



c 



i + C 



i + C C 2n (i-C) 
-C 2n (i-C) i + C 



p'(a) 



has det(A) = ( ^ 0, and hence writes p over F. If p' — A 1 pA, then 
° l ] and o'(b)- l ( l + e C 2 "(l-C 2 r 

-l and p [b) ~ 2 vc 2n (i - C 2 ) -i-c 2 

The similarity between A and p'(&) is interesting. For each n there are 
many choices for p Q , and then many choices for v such that Hc(vl) is 
invertible. Our choices p a = ( 2n , v = (l + £)/2 give a simple expression 
for p'(b). Another choice when n is odd is p a = 1 + ( n — ( 3n and v — 1. 

Example 3. Let if = (a, 6 | a m = 6 n = 1, a~ l ba = b r ) where r is the 
order of m modulo n. Let C = Cn, E = Q(C), and let F = where 
a e Aut(E) is defined by a(C) = C- Define p: H -> GL m (E) by 

/o i o \ /c \ 



p(a) 





\i o 



i 

0/ 



and p(6) = 



V 



A „m— 1 



Then C Q = p(a) and C a i = C a a(C a ) • ■ ■ a 1 (C a ) = p(a) 1 and 



m— 1 



A = n c (A/) = ]Tc>*(A) 



(A)) 



is invertible if and only if A defines a normal basis for E over F. If 
p' = A~ 1 pA, then p'{a) = p(a) and the expression for p'(b) is rather 
complicated, and depends on r. 

Example 4. Let E : F be a finite Galois extension with group G. Let 
a be the left regular representation G — > Sym(G) satisfying a a {.l) = «7 
and a a/ 3 = cr a o<jp. Let H be the split extension of E x by G. Specifically, 
let H = G x E x where 

(a,\)(J3,n) = (a(3,(3(X)fi) (a, (3 e G, A, p e E x ). 

Define p: H -> GL| G |(E) by p(«, A) = (^(A)^^)^) where (5^ v ) is the 
identity matrix. The (£,77) entry of p(a, A) is zero unless £ = ^(r/) 
in which case it equals 77(A). The (£,77) entry of p(a , A) p(/3 , p) is zero 
unless £ = (Japijl) m which case it equals ap(r])(X)r)(p) = r)((3(\)p). 
This proves that p is a homomorphism. Since p is induced from a 1- 
dimensional representation E x — > GLi(E) which is fixed only by the 
identity automorphism, it follows from Clifford's theorem that p is 
absolutely irreducible. We may take C a to be the permutation matrix 
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p(a, 1) corresponding to o a . Then A = Ihj(AJ) is invertible if and only 
if A defines a normal basis for E over F. If |F| = q and |E| = q n , 
then the probability that Yl c (\I) is invertible is q~ n J2 d \ n h l (n/d)q d 
where \i denotes the Mobius function. It follows by considering base-g 
expansions that J2 d \ n /J'(n/d)q d > q n — q n ^ p > q n — q n l 2 where p is the 

smallest prime divisor of n. Hence q~ n J2 d \ n p(n/ d)q d > 1 — q~ n / 2 '. 
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